Cloud Attack Countermeasures EHE Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   A cloud administrator wants to ensure that users have only the permissions necessary to perform their job functions. Which IAM best practice should be applied?

   • ASingle sign-on (SSO)
   • BMulti-factor authentication (MFA)
   • CLeast privilege principle
   • DStrong password policies
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company's cloud environment was compromised and the attacker remained undetected for weeks. The security team wants to improve early detection. Which countermeasure is most effective?

   • AConduct regular backups and test restoration procedures.
   • BCentralize logs from all cloud services and configure alerts for suspicious activities such as unusual login times or API calls.
   • CEncrypt all data at rest and in transit.
   • DImplement a strong password policy and require periodic password changes.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A financial institution must store customer data in a specific geographic region to comply with data residency regulations. They are migrating to the cloud. Which countermeasure is most directly required?

   • AEnable multi-factor authentication for all administrators
   • BEncrypt all data in transit using TLS
   • CSelect a cloud region that matches the required geographic location
   • DImplement a security group that restricts access to the data
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company's cloud VPC contains a web tier, an application tier, and a database tier. After an incident, the security team found that an attacker who compromised the web server was able to directly access the database. Which countermeasure would have most effectively prevented this lateral movement?

   • ADeploy a web application firewall in front of the web tier.
   • BImplement a backup strategy that includes daily snapshots of the database.
   • CEnable detailed logging on the web server and send logs to a centralized SIEM.
   • DPlace the web, application, and database tiers in separate subnets and configure security groups to allow only the necessary traffic between them.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company processes credit card payments and must protect cardholder data. They want to minimize the risk of exposing full card numbers in their cloud databases. Which countermeasure is most appropriate?

   • AReplace card numbers with tokens and store the actual card numbers in a separate, highly secured vault.
   • BMask the card numbers only in the application's user interface.
   • CEncrypt the entire database with a single key and store the key in the same database.
   • DUse network segmentation to isolate the database from the internet.
   Reveal Solution Discussion Select an answer first